Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e79c049-d9d7-33e3-a082-73ae07ad7f6f.roa
File:                     5e79c049-d9d7-33e3-a082-73ae07ad7f6f.roa (raw, json)
Hash identifier:          WyW5YuuqI8jkAgb8q7rg73dX81qYyit8+R9BMe7VwUM=
Subject key identifier:   02:8E:54:A7:FC:9F:FE:70:7A:28:35:9C:54:82:2C:5F:28:9D:97:FD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84113D81055BE8ECE975D480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e79c049-d9d7-33e3-a082-73ae07ad7f6f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        162.72.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:3d:81:05:5b:e8:ec:e9:75:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5eccc28b-2802-4f13-81bb-3c485f260905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:80:0d:0d:59:02:38:7a:5c:22:69:93:b4:00:
                    0f:b3:52:18:9c:66:45:57:2b:9b:1b:00:db:8b:f8:
                    88:2d:85:ef:50:76:b4:9b:2d:e4:30:c4:0a:0f:77:
                    0c:46:2e:d2:e5:0e:2c:5c:bc:70:13:8d:b0:97:98:
                    86:1f:cb:a3:23:25:22:d7:11:6e:d1:2a:04:d8:7a:
                    b7:df:0d:34:a0:e2:b4:40:54:91:ea:aa:77:2e:2f:
                    57:f4:61:7f:78:74:24:16:74:e7:97:21:46:5a:3f:
                    3c:58:e4:16:e3:20:32:6a:fd:71:7d:88:d9:1d:9a:
                    43:d9:6a:64:1b:b9:45:e8:87:38:a4:a8:c0:c2:2d:
                    0b:a0:3e:fa:61:fa:ba:cd:48:52:4c:b3:ee:b5:1b:
                    11:bd:c5:b7:5f:95:a0:b8:c3:1a:34:59:0f:e8:42:
                    41:25:db:17:a4:15:dd:83:6e:4a:50:41:9a:3c:91:
                    e5:ec:c7:1d:1c:e7:b7:03:83:d6:56:b9:79:ec:bc:
                    40:cd:91:40:0d:5f:f1:2a:62:06:0c:2b:8a:c0:e3:
                    7c:d8:af:d0:e3:a7:93:68:64:92:af:c9:ea:99:10:
                    9b:91:2f:e6:36:7e:d2:e9:f0:4c:b7:2f:6b:1a:1b:
                    7b:50:88:2f:16:68:f1:07:2c:dc:55:5f:b1:9e:41:
                    74:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8E:54:A7:FC:9F:FE:70:7A:28:35:9C:54:82:2C:5F:28:9D:97:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e79c049-d9d7-33e3-a082-73ae07ad7f6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a6:f6:be:10:70:b9:dc:9f:91:df:f5:d0:48:8c:49:c3:82:
         11:c5:40:ae:67:f4:96:f7:a8:5c:3c:21:dd:9a:f7:ed:fb:0f:
         be:f0:83:a9:2a:40:46:8a:e1:52:c8:9c:b7:4d:a2:47:f4:4b:
         a0:6b:dc:8c:1c:ca:29:e6:33:11:f1:e5:a0:d3:bf:b7:86:1b:
         2f:2c:67:1c:2b:59:a2:18:4f:df:3d:9e:7d:af:ef:37:a7:06:
         35:02:f4:25:30:b4:0c:4a:fe:bc:0c:4d:58:4c:76:1e:4a:80:
         19:da:df:b8:60:b8:7e:0b:17:be:9b:ae:e5:0d:f4:fc:47:12:
         f2:36:ef:5a:a6:2b:61:e4:2d:95:3f:ab:a5:8e:ff:02:84:80:
         9c:a9:f5:44:48:d0:e2:fb:8a:11:59:7c:b2:f1:c6:00:18:1e:
         d2:9e:18:68:28:b2:3f:cc:23:8d:65:65:93:ac:b8:4e:bc:85:
         15:22:99:20:e5:5e:97:99:81:ce:1c:bf:5a:71:34:9c:f7:89:
         d8:23:a3:22:f1:5c:18:aa:6b:fe:bd:00:cb:17:a5:2f:52:ac:
         f7:2c:31:7a:68:c8:e9:ba:04:b9:91:cf:43:82:2f:f0:c9:60:
         01:80:9c:1c:95:c7:56:9c:30:08:f2:84:97:02:6c:ca:06:72:
         30:a4:0d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:10:11 2025 by rpki-client